Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium


Server 2000 SP4 with lsass.exe memory leak

Posted on 2010-01-04
Medium Priority
Last Modified: 2013-12-05
Good day experts,

We are currently experiencing memory leaks from the lsass.exe process on one of our elderly Server 2000 boxes.

OS: Server 2000  5.00.2195 with SP4 - patched with latest Microsoft critical patches.
Hardware: Core2Duo 2.6 / 2GB RAM / 2x 20gig Hard drives

We have not upgraded/changed anything on the server in the last 11 months with the exception of Microsofts critical patches.
However, a few weeks ago the lsass.exe process started leaking memory, to the point that the server becomes unresponsive and requires a restart - obviously this is not ideal in a production environment.
Microsoft support acknowledge that it 'was' a known issue but was resolved in the release of Service Pack 4 (http://support.microsoft.com/kb/810585).
Sadly, our 2000 server is running SP4 and we still are getting a memory leak.
The hotfix provided by Microsoft will only apply itself if the server is running SP3 or lower.

If anyone knows how to solve this problem I would highly appreciate it as our team is getting a lot of flak from the business owners as the restarts require production downtime.

Kind Regards,

BCX-Support South Africa
Question by:bcx_expexc
LVL 17

Expert Comment

ID: 26177952
Do you have MS web proxy IIS running on the server? If yes can you restart the service and see if CPU go back to normal.  

Author Comment

ID: 26178126
Hi Tiras25,
We are not really having any problems with the CPU usage, it is the memory usage that is climbing and then killing the server performance.
Will the MS Web proxy IIS have any effect on memory usage?
LVL 10

Expert Comment

ID: 26178233
Monitor the performance using the Process Explorer and identify the problematic processes.
Receive 1:1 tech help

Solve your biggest tech problems alongside global tech experts with 1:1 help.


Author Comment

ID: 26178485
Hi Fayaz,
We ran Process Explorer when the memory leak first occured. The only process that showed high memory usage was the lsass.exe process.
However restarting or killing that process causes the server to become unresponsive and then we are forced to restart the server.
LVL 22

Accepted Solution

dan_blagut earned 1500 total points
ID: 26379646

MS say that Lsass can use a large amount of memory is it used in AD, so do you have an AD on that machine? (http://support.microsoft.com/?scid=kb%3Ben-us%3B308356&x=14&y=10)

Can you tell us what exactlly is the role of your server?


Author Closing Comment

ID: 32342799
Thanx all

Featured Post

[Webinar On Demand] Database Backup and Recovery

Does your company store data on premises, off site, in the cloud, or a combination of these? If you answered “yes”, you need a data backup recovery plan that fits each and every platform. Watch now as as Percona teaches us how to build agile data backup recovery plan.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Have you considered what group policies are backwards and forwards compatible? Windows Active Directory servers and clients use group policy templates to deploy sets of policies within your domain. But, there is a catch to deploying policies. The…
Understanding the various editions available is vital when you decide to purchase Windows Server 2012. You need to have a basic understanding of the features and limitations in each edition in order to make a well-informed decision that best suits …
In this video, Percona Director of Solution Engineering Jon Tobin discusses the function and features of Percona Server for MongoDB. How Percona can help Percona can help you determine if Percona Server for MongoDB is the right solution for …
In this video, Percona Solutions Engineer Barrett Chambers discusses some of the basic syntax differences between MySQL and MongoDB. To learn more check out our webinar on MongoDB administration for MySQL DBA: https://www.percona.com/resources/we…
Suggested Courses

578 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question